What's a retention period for a processing activity?

Personal data cannot be kept indefinitely: a retention period must be determined according to the purpose for which the data was collected.

The idea being to store data "as long as necessary" and "as short as possible", taking into account national legal rules that may impose fixed periods, and then to delete or anonymize them.

Become GDPR compliant in minutes!

Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.
Start for free